CVE-2006-4280

PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo allows remote attackers to execute…

published August 21, 2006

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by a third party, who says that $mosConfig_absolute_path is set in a configuration file

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01508 · 74.2th percentile
Published
2006-08-21T22:00Z
EPSS history
Timeline
  • 21 AUG 22:00Z
    PHP remote file inclusion vulnerability in anjel.index.php in ANJEL (formerly MaMML) Component (com_anjel) for Mambo allows remote attackers to execute…
    cvelistv5